The NCSC just urged enterprises to ditch Windows 10 – here’s what you need to know
The UK cyber agency says those that haven’t migrated to Windows 11 should do so immediately


The UK's National Cyber Security Center (NCSC) has urged organizations to upgrade to Windows 11 before the end of support deadline for Windows 10 hits in October.
In a blog post, the cybersecurity body pointed out there are significant security risks for those who do not choose to upgrade.
Beyond the difficulties linked to being out of a dedicated support period, out-of-date operating systems are prime targets for cyber criminals – and the NCSC said the risks simply aren’t worth it.
30% off Keeper Security's Business Starter and Business plans
Keeper Security is trusted and valued by thousands of businesses and millions of employees. Why not join them and protect your most important assets while taking advantage of this special offer?
Take the IE 6-11 vulnerability from the end of support for Windows XP as an example.
Organizations have until October 2025 to update their devices and hardware before Windows 10 reaches end-of-life status. Despite Windows 11 being almost four years old, many have still not made the switch.
“While Windows 10 was released more than a decade ago, it is still used widely by enterprises and not upgrading is akin to incurring a debt at a high interest rate – with the threat of forced repayment at a future date,” NCSC chief technical officer, Ollie Whitehouse, warned.
“The NCSC implores any organisation that has not already migrated to a more modern system to do so to help address security vulnerabilities in your devices and ensure overall cyber resilience. This is essential as demonstrated by the requirement to maintain supported software in Cyber Essentials.”
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
What’s holding up the shift to Windows 11?
One reason for companies holding on to Windows 11 could be the necessary hardware requirements.
Requirements such as TPM 2.0, UEFI, and support for Secure Boot may mean upgrading to more modern laptops, which might be a cost headache in the short term.
However, the cost of a cyber incident might be far worse in the long run.
As part of its guidance, the NCSC also released updated configuration packs for Microsoft Windows, with selected group settings to make it easier to deploy.
The requirements have led to suggestions that it could lead to a global torrent of e-waste, with millions of devices scrapped.
Research from Canalys suggested that up to 240 million PCs around the world could be terminated as a result of the shift to Windows 11.
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- NCSC expert urges businesses to follow geopolitics as defensive strategy
- The NCSC wants developers to get serious on software security
- What you need to know about the new NCSC ransomware guidance
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Cognition pips OpenAI with Windsurf acquisition
News The acquisition by Cognition comes after a rumored $3bn offer from OpenAI fell through
-
Application layer DDoS attacks are skyrocketing – here's why
News The industry is seen as a prime target thanks to a reliance on online services and real-time transactions
-
Enterprises need to sharpen up on software supply chain security
News A new report from LevelBlue shows many enterprises are failing on software supply chain security, despite growing risks.
-
Windows 11 finally overtakes Windows 10 in popularity – but what’s driving this surge?
News It’s been a long time coming, but Windows 11 is finally Microsoft’s most popular operating system
-
AI-generated code is in vogue: Developers are now packing codebases with automated code – but they’re overlooking security and leaving enterprises open to huge risks
News While AI-generated code is helping to streamline operations for developer teams, many are overlooking crucial security considerations.
-
CISOs take the back seat as dev teams claim responsibility for application security
News Development and engineering teams are steering security and budget strategies
-
The NCSC wants developers to get serious on software security
News The NCSC's new Software Security Code of Practice has been welcomed by cyber professionals as a positive step toward bolstering software supply chain security.
-
Intune flaw pushed Windows 11 upgrades on blocked devices
News Microsoft is working on a solution after Intune upgraded devices contrary to policies
-
Dragging your feet on Windows 11 migration? Rising infostealer threats might change that
News With the clock ticking down to the Windows 10 end of life deadline in October, organizations are dragging their feet on Windows 11 migration – and leaving their devices vulnerable as a result.
-
Recall arrives for Intel and AMD devices after months of controversy
News Microsoft's Recall feature is now available in preview for customers using AMD and Intel devices.